Domain > xzsky.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to xzsky.com

MD5	A/V
bd570498742706ea2de2b6ad835af892	[RDN/Downloader.a!pj] [PUP.Optional.Meinv] [WS.Reputation.1] [Trojan.NSIS.StartPage.eg] [Troj/StartP-HV] [Heuristic.BehavesLike.Win32.Suspicious-PKR.K] [Trojan.Win32.StartPage.ATrH] [NSIS/TrojanDownloader.Grinidou.C] [Trojan.NSIS] [W32/StartPage.NY!tr] [Trj/CI.A]
4a3530ed68e64f411cd0b66cc98ef058	[Artemis!4A3530ED68E6] [Trojan.Downloader.cn] [WS.Reputation.1] [Startpage.ITJD] [Trojan.Win32.Badur.gcyr] [Heuristic.BehavesLike.Win32.Suspicious-PKR.S] [Win32.Troj.Badur.gc.(kcloud)] [PUP/Win32.StartPage] [Trojan.NSIS] [W32/Badur.GCYR!tr] [SHeur4.ALHH]
c1252eb364322888637ae84b1132d8ac	[Trojan.Downloader.Hicrazyk.A] [PUP.Optional.Meinv] [WS.Reputation.1] [Trojan.NSIS.StartPage.eg] [Trojan.Win32.MLW.ctuohs] [TrojWare.NSIS.TrojanDownloader.Grinidou.~F] [Trojan.StartPage.Win32.21177] [TR/Rogue.10020155.57] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [Troj/StartP-HV] [W32/Trojan.HCJC-0643] [Trj/CI.A] [NSIS/TrojanDownloader.Grinidou.F] [Win32.Adware.Malplayer.Odmd] [Trojan.NSIS] [W32/StartPage.NZ!tr] [SHeur4.ALHH] [Trojan.Win32.StartPage.ABPD]
999cb270eae6e56e1f7e91be9f5a3a57	[Trojan.Downloader.Hicrazyk.A] [Artemis!999CB270EAE6] [PUP.Optional.Meinv] [Trojan.ADH] [Trojan.NSIS.StartPage.eg] [Trojan.DownLoader9.9417] [TR/Rogue.10020155.63] [Heuristic.BehavesLike.Win32.Suspicious-PKR.S] [Troj/StartP-HV] [Win32.Troj.Malplayer.Od.(kcloud)] [Trojan.Win32.StartPage.azZ] [NSIS/TrojanDownloader.Grinidou.F] [Trojan.NSIS] [W32/StartPage.NZ!tr] [SHeur4.ALHH]
c1333e3d48b6764ebe2c5d6df5d84519	[Trojan.Downloader.Hicrazyk.A] [Trojan.NSIS.g5] [Artemis!C1333E3D48B6] [PUP.Optional.Meinv] [Trojan.ADH] [Startpage.ITJD] [Trojan.NSIS.StartPage.eg] [Trojan.Win32.MLW.ctuohs] [Win32.Adware.Malplayer.Odmd] [Troj/StartP-HV] [TR/Rogue.10020155.35] [Heuristic.BehavesLike.Win32.Suspicious-PKR.S] [Win32.Troj.Malplayer.Od.(kcloud)] [Trojan.NSIS.Downloader.NOS] [NSIS/TrojanDownloader.Grinidou.F] [Trojan.NSIS] [SHeur4.ALHH] [Trj/CI.A] [Win32/Trojan.Downloader.849]
b8d0ff525ff7e4f2b2c577519665c147	[Trojan.Downloader.Hicrazyk.A] [Trojan.Badur.g5] [Artemis!B8D0FF525FF7] [Trojan.Downloader.cn] [Trojan.ADH.2] [Startpage.ITJD] [Trojan.Win32.Badur.gbfp] [Heuristic.BehavesLike.Win32.Suspicious-PKR.S] [Troj/StartP-HV] [Trojan/NSIS.StartPage.eg] [Win32.Troj.Badur.gb.(kcloud)] [NSIS/TrojanDownloader.Grinidou.F] [Trojan.NSIS] [W32/StartPage.NZ!tr] [SHeur4.ALHH] [Trojan.Win32.Badur.ATl]
9e5398c8f95bcafec8b2a50437a1d012	[Trojan.Downloader.Hicrazyk.A] [Trojan.NSIS.g5] [Artemis!9E5398C8F95B] [PUP.Optional.Meinv] [Trojan.StartPage.Win32.21471] [Trojan.ADH] [Startpage.ITJD] [Trojan.NSIS.StartPage.eg] [Trojan.Win32.MLW.ctuohs] [TrojWare.NSIS.TrojanDownloader.Grinidou.~F] [TR/Rogue.10020155.34] [Heuristic.BehavesLike.Win32.Suspicious-PKR.S] [Troj/StartP-HV] [NSIS/TrojanDownloader.Grinidou.F] [Win32.Adware.Malplayer.Odmd] [Trojan.NSIS] [W32/StartPage.NZ!tr] [SHeur4.ALHH] [Trojan.Win32.StartPage.agQD] [Win32/Trojan.Downloader.849]
039ded92ce2975569fad749fd5a26c37	[Trojan.Downloader.Hicrazyk.A] [Trojan.NSIS.r5] [PUP.Optional.Meinv] [Trojan.StartPage.Win32.21435] [WS.Reputation.1] [Trojan.NSIS.StartPage.eg] [TrojWare.NSIS.TrojanDownloader.Grinidou.~C] [Trojan.DownLoader11.8545] [Heuristic.BehavesLike.Win32.Suspicious-PKR.K] [Troj/StartP-HV] [Trojan/Win32.StartPage] [Trojan.StartPage] [Trojan.Win32.StartPage.ATz] [NSIS/TrojanDownloader.Grinidou.C] [Win32.Adware.Malplayer.Odmd] [Trojan.NSIS] [W32/StartPage.NY!tr] [Trj/CI.A]
1905193a8e0310b3717996bec7b8f129	[Artemis!1905193A8E03] [Adware.ChinAd] [Trojan.NSIS.StartPage.eg] [Artemis!1905193A8E03] [Win32.Troj.NSIS.eg.(kcloud)]

Whois

Property	Value
Email	7370132@qq.com
NameServer	F1G1NS2.DNSPOD.NET
Created	2009-04-01 00:00:00
Changed	2015-03-18 00:00:00
Expires	2016-04-01 00:00:00
Registrar	ENAME TECHNOLOGY CO.

DNS Resolutions

Date	IP Address
2014-06-25	122.225.104.211 (ClassC)
2015-08-07	-
2024-12-27	65.0.138.86 (ClassC)

Subdomains

Date	Domain	IP
www.xzsky.com	2013-12-07	122.225.104.211

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]